CVE-2016-2226

High

Published: 24/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, posing a serious threat to the integrity and confidentiality of the system.

Recommendation

It is recommended to update libiberty to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in libiberty

CVE-2021-3826Medium
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

Original NVD description (English source)

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS